$ rpki-client -vvf repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft File: C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft (raw, json) Hash identifier: XUm0Od7rvD4PsaCii2B5SzEPSg+37QI9pSYUwMtf64Y= Subject key identifier: D0:C9:C2:08:A3:BC:E2:D6:FA:D0:C3:52:AB:7A:96:11:9D:E1:0C:F3 Authority key identifier: C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F Certificate issuer: /CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Certificate serial: 7127AE5749B1B10C6CDE1701FF68134CBE537E93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft Manifest number: 049F Signing time: Sun 19 Oct 2025 22:11:58 +0000 Manifest this update: Sun 19 Oct 2025 22:06:58 +0000 Manifest next update: Thu 23 Oct 2025 04:20:58 +0000 Files and hashes: 1: 3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa (hash: c0jEtUhY3CCnihYNexzABK/peyf3Gx5R2jF1ZOsdS10=) 2: 3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (hash: SZcb1mBv7DekH6untdETGe0D1z9cA9VcoDjOf2l6JsU=) 3: 3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (hash: JEJ2gtjqR3xoAWSFfThnnAX4k9LDg24aEZrng1n0P04=) 4: C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl (hash: 9ntfU6HnkvX8bOh9FF+k2D+7yBBeMxIT//4Y06nScqI=) 5: 3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa (hash: QCfD8qeAQE97bNj4JFmZ7141O7lTEcCS9gxeLKd+OXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 04:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:27:ae:57:49:b1:b1:0c:6c:de:17:01:ff:68:13:4c:be:53:7e:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Validity Not Before: Oct 19 22:06:58 2025 GMT Not After : Oct 23 04:20:58 2025 GMT Subject: CN=D0C9C208A3BCE2D6FAD0C352AB7A96119DE10CF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:42:24:68:07:cb:13:c9:2d:c2:83:7d:a7:40: 95:c7:0c:b2:62:f0:91:9e:48:79:0f:11:d1:11:b2: 41:9a:6f:b0:95:6f:c2:d5:e7:28:bc:13:82:70:1d: 46:79:95:1a:54:64:cf:64:01:f9:40:39:49:1d:f8: db:a2:cc:5c:32:fc:e0:c6:ee:c4:64:e5:d2:08:65: d4:ce:ad:b0:72:46:ca:72:91:6f:a5:85:49:cd:37: ce:e7:54:e0:20:86:e4:f2:8f:f4:8a:9d:9f:ff:3b: 49:1c:69:e3:ea:31:ed:bb:75:fb:b3:f9:49:62:60: 7f:1a:8b:d0:74:b6:a9:96:9d:76:d9:0d:88:63:c3: 60:82:25:91:c3:b8:22:f8:b3:4a:6f:40:9b:65:86: d9:ce:71:fd:91:89:42:86:67:82:e6:1f:65:86:fc: f4:2c:1e:2b:4f:4c:5d:0d:6c:a4:cb:e5:74:42:93: 7a:a1:9b:2a:23:10:bd:be:12:c0:5d:e2:d6:e0:23: 65:e7:b2:34:2e:64:37:c2:ed:23:71:13:25:82:e4: 71:2b:ab:29:cd:f3:21:39:f0:81:5a:2e:80:8b:39: 16:10:0d:42:30:96:2f:6b:e7:ed:c6:08:47:70:89: 5b:56:2f:87:94:19:07:1c:82:fa:be:10:cd:06:fb: 9a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C9:C2:08:A3:BC:E2:D6:FA:D0:C3:52:AB:7A:96:11:9D:E1:0C:F3 X509v3 Authority Key Identifier: keyid:C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:7b:25:2f:0e:7b:6d:6d:2f:92:ec:b8:e1:48:c6:d3:f1:a0: 74:73:0e:67:50:f1:b7:43:62:56:04:2d:7e:95:63:8c:ba:b7: cf:a1:57:3f:9f:03:d2:68:18:ed:2e:5b:6b:17:a3:ad:d2:62: 66:c9:2d:fc:09:f0:91:62:00:a4:b0:4c:57:27:ea:b9:45:98: 8c:96:8a:cd:a4:cc:02:3b:8d:e7:d3:ee:fa:31:ec:17:dd:65: 61:b3:89:fe:77:b3:fa:e2:14:5e:36:44:a6:a1:66:3e:b3:35: 82:f4:31:d6:24:17:c2:ab:56:26:a6:cc:9f:25:0e:7c:99:33: 9c:ec:a5:0b:da:7b:19:1c:3c:79:5b:51:a2:bb:c0:57:15:0b: 11:70:46:a6:f7:80:9f:2d:8c:89:3b:fc:d6:d0:d7:df:9c:f6: 37:a3:38:27:38:38:b9:2f:d1:53:58:3b:df:89:f0:51:28:1e: 4a:d9:56:46:fe:54:b1:c2:fe:94:1a:6f:71:cd:c5:38:3f:2f: 1b:f7:99:4a:78:6c:83:e3:29:19:3f:1b:2a:9e:8a:6f:72:d7: f5:f7:32:bf:46:93:b6:10:ce:a2:ed:59:0c:a9:62:df:09:fe: 8b:fa:6a:03:62:f7:c2:94:46:a4:88:7b:39:41:1f:0b:52:0e: 7e:db:71:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcSeuV0mxsQxs3hcB/2gTTL5TfpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRD MjIzNEUyRjAeFw0yNTEwMTkyMjA2NThaFw0yNTEwMjMwNDIwNThaMDMxMTAvBgNV BAMTKEQwQzlDMjA4QTNCQ0UyRDZGQUQwQzM1MkFCN0E5NjExOURFMTBDRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQiRoB8sTyS3Cg32nQJXHDLJi 8JGeSHkPEdERskGab7CVb8LV5yi8E4JwHUZ5lRpUZM9kAflAOUkd+NuizFwy/ODG 7sRk5dIIZdTOrbByRspykW+lhUnNN87nVOAghuTyj/SKnZ//O0kcaePqMe27dfuz +UliYH8ai9B0tqmWnXbZDYhjw2CCJZHDuCL4s0pvQJtlhtnOcf2RiUKGZ4LmH2WG /PQsHitPTF0NbKTL5XRCk3qhmyojEL2+EsBd4tbgI2XnsjQuZDfC7SNxEyWC5HEr qynN8yE58IFaLoCLORYQDUIwli9r5+3GCEdwiVtWL4eUGQccgvq+EM0G+5oZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0MnCCKO84tb60MNSq3qWEZ3hDPMwHwYDVR0j BBgwFoAUxR9kj92IkTl+ogs09t4DbcIjTi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTA3ZmQ4YS0xNTBmLTQ1M2YtYTBmNS01N2VhZDQxZWQwMzIvMC9DNTFGNjQ4RkRE ODg5MTM5N0VBMjBCMzRGNkRFMDM2REMyMjM0RTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRDMjIz NEUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEwN2ZkOGEtMTUwZi00NTNmLWEw ZjUtNTdlYWQ0MWVkMDMyLzAvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAz NkRDMjIzNEUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB97JS8Oe21tL5LsuOFIxtPxoHRzDmdQ8bdD YlYELX6VY4y6t8+hVz+fA9JoGO0uW2sXo63SYmbJLfwJ8JFiAKSwTFcn6rlFmIyW is2kzAI7jefT7vox7BfdZWGzif53s/riFF42RKahZj6zNYL0MdYkF8KrViamzJ8l DnyZM5zspQvaexkcPHlbUaK7wFcVCxFwRqb3gJ8tjIk7/NbQ19+c9jejOCc4OLkv 0VNYO9+J8FEoHkrZVkb+VLHC/pQab3HNxTg/Lxv3mUp4bIPjKRk/Gyqeim9y1/X3 Mr9Gk7YQzqLtWQypYt8J/ov6agNi98KURqSIezlBHwtSDn7bcbo= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:06 2025 by rpki-client